Vulnerability Details CVE-2024-23788
Server-side request forgery vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated attacker to send an arbitrary HTTP request (GET) from the affected product.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 45.5%
CVSS Severity
CVSS v3 Score 8.1
References
Products affected by CVE-2024-23788
-
cpe:2.3:h:sharp:jh-rv11:-
-
cpe:2.3:h:sharp:jh-rvb1:-
-
cpe:2.3:o:sharp:jh-rv11_firmware:-
-
cpe:2.3:o:sharp:jh-rv11_firmware:b0.1.9.1
-
cpe:2.3:o:sharp:jh-rvb1_firmware:-
-
cpe:2.3:o:sharp:jh-rvb1_firmware:b0.1.9.1